Merge pull request #1150 from Rugvip/state_key
api/auth: fix for not being allowed to set your own state_key
This commit is contained in:
commit
a940618c94
|
@ -1002,16 +1002,6 @@ class Auth(object):
|
|||
403,
|
||||
"You are not allowed to set others state"
|
||||
)
|
||||
else:
|
||||
sender_domain = UserID.from_string(
|
||||
event.user_id
|
||||
).domain
|
||||
|
||||
if sender_domain != event.state_key:
|
||||
raise AuthError(
|
||||
403,
|
||||
"You are not allowed to set others state"
|
||||
)
|
||||
|
||||
return True
|
||||
|
||||
|
|
Loading…
Reference in New Issue